1783 matches found
Debian DLA-747-1 : libupnp security update
Scott Tenaglia discovered a heap-based buffer overflow in libupnp, a portable SDK for UPnP Devices. That can lead to denial of service or remote code execution. For Debian 7 'Wheezy', these problems have been fixed in version 1:1.6.17-1.2+deb7u2. We recommend that you upgrade your libupnp package...
[SECURITY] [DLA 753-1] tomcat7 security update
Package : tomcat7 Version : 7.0.28-4+deb7u8 CVE ID : CVE-2016-9774 Debian Bug : 845393 845425 846298 Paul Szabo discovered a potential privilege escalation that could be exploited in the situation envisaged in DLA-622-1. This update also addresses several regressions stemming from incomplete fixe...
DLA-753-1 tomcat7 - security update
Bulletin has no description...
[SECURITY] [DLA 746-2] tomcat6 regression update
Package : tomcat6 Version : 6.0.45+dfsg-1deb7u5 Debian Bug : 848492 The last security update introduced a regression due to the use of StringManager in the ResourceLinkFactory class. The code was removed again since it is not strictly required to resolve CVE-2016-6797. For Debian 7 "Wheezy", thes...
DLA-752-1 icedove - security update
Bulletin has no description...
[SECURITY] [DLA 748-1] libupnp4 security update
Package : libupnp4 Version : 1.8.0svn20100507-1.2+deb7u1 CVE ID : CVE-2016-8863 Scott Tenaglia discovered a heap-based buffer overflow in libupnp4, a portable SDK for UPnP Devices. That can lead to denial of service or remote code execution. For Debian 7 "Wheezy", these problems have been fixed i...
DLA-747-1 libupnp - security update
Bulletin has no description...
DLA-751-1 nagios3 - security update
Bulletin has no description...
DLA-744-1 icu - security update
Bulletin has no description...
DLA-746-1 tomcat6 - security update
Bulletin has no description...
DLA-748-1 libupnp4 - security update
Bulletin has no description...
DLA-743-1 firefox-esr - security update
Bulletin has no description...
Debian DLA-741-1 : unzip security update
'unzip -l' CVE-2014-9913 and 'zipinfo' CVE-2016-9844 were vulnerable to buffer overflows when provided malformed or maliciously-crafted ZIP files. For Debian 7 'Wheezy', these problems have been fixed in version 6.0-8+deb7u6. We recommend that you upgrade your unzip packages. NOTE: Tenable Networ...
DLA-741-1 unzip - security update
Bulletin has no description...
DLA-742-1 chrony - security update
Bulletin has no description...
Debian DLA-740-1 : libgsf security update
It was discovered that there was a NULL pointer deference exploit in libgsf, a I/O abstraction library for GNOME. An error within the 'tardirectoryforfile' function could be exploited to trigger a NULL pointer dereference and subsequently cause a crash via a crafted TAR file. For Debian 7 'Wheezy...
Debian DLA-739-1 : jasper security updat
CVE-2016-8691 FPE on unknown address ... jpcdecprocesssiz ... jpcdec.c CVE-2016-8692 FPE on unknown address ... jpcdecprocesssiz ... jpcdec.c CVE-2016-8693 attempting double-free ... memclose ... jasstream.c CVE-2016-8882 segfault / NULL pointer access in jpcpidestroy CVE-2016-9560 stack-based...
DLA-732-3 monit - regression update
Bulletin has no description...